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5 FIELD OF THE INVENTION 

This application relates generally to network promotion systems, and more 
particularly, to a redemption system for use with a promotion system to provide 
redemption authentication, control and security. 

1 0 BACKGROUND OF THE INVENTION 

In general, merchants (e.g., proprietors of goods and services) participate 
in incentive programs to entice customers or consumers to purchase products or services; 
and website operators employ incentives schemes to incent consumers to visit their 
websites more frequently. Typically, merchants want to reward customers for purchasing 

1 5 merchandise and thereby fulfill the goal of conferring the maximum benefit on the 
customer while minimizing the merchant's overhead and cost. 

One type of incentive program confers a single product, service or benefit 
to the customer as an award. The frequent flyer mileage program is an example of an 
incentive program that confers a single predefined benefit to the customer. In one 

20 frequent flyer mileage program, credit cards associated with airlines permit customers to 
receive frequent flyer miles in exchange for the customer's use of the credit cards. The 
frequent flyer incentive programs typically award the customer one frequent flyer mile for 
each dollar spent using the credit cards. The customer subsequently redeems the frequent 
flyer miles earned for airline tickets or upgrades in accordance with the rules of the 

25 frequent flyer mileage program. 

In another type of incentive program, the customer may receive incentive 
points" or stamps based on the value of a purchase. For example, if a customer 
purchases a $1,000 item, the customer may receive 1,000 points. For this type of 
incentive program the customer is also provided with a way to redeem the points. 

30 Typically, the customer may redeem the points by selecting items, such as merchandise or 
services, from a catalog. 




Although the catalog provides the customer with a greater selection than 
the predetermined benefit program, the customer's benefit is constrained to items in the 
catalog. A merchant, when setting up the incentive program, must select how the 
customer will receive benefit. For example, the merchant may set up the incentive 
5 program with a vendor or supplier of the value, such as in a frequent flyer mileage 
program, so that the customer receives a pre-determined benefit (e.g., frequent flyer 
miles) after the customer purchases the merchant's product. Alternatively, the merchant 
may develop a catalog of merchandise for which the customer may redeem items based 
on the amount awarded. Accordingly, because the merchant desires to confer the 

10 maximum benefit on the customer, it is desirable, when implementing an incentive 
program, to provide the customer with a wide array of choices while minimizing the 
overhead required by the merchant to implement the incentive program. 

As outlined above, incentive programs are currently used for credit card 
transactions, as well as other customer transactions performed at a merchant's store. 

15 However, data networks, such as the Internet, provide numerous opportunities for 
conducting electronic transactions, including transactions relating to electronic 
commerce. The potential for commerce over the Internet is great because a user, through 
the use of a computer connected to the Internet, may connect up with a huge number of 
merchants. Alternatively, the Internet allows merchants to connect up with a huge 

20 number of consumers. Because incentive programs are an effective way of motivating 
customers to purchase goods or services, it is desirable to implement an incentive 
program for use with the Internet. 

An incentive program that gives awards to consumers for making a 
purchase is referred to as High Authentication Promotion (HAP) program. It is a HAP 

25 program because a consumer must provide detailed information about themselves to 
satisfy a high level of authentication in order to complete the purchase and earn the 
award. For example, the consumer may be required to provided their name, address and 
credit card number to complete the purchase. Another type of incentive program that is 
suitable for use with the Internet is referred to as a Low Authentication Promotion (LAP) 

30 program. The LAP program enables consumers to earn awards for activities that do not 
require the user to provide the same level of authentication normally found in a HAP. To 
participate in a LAP program, users may need to provide only minimal information about 
themselves, such as an email address. For example, a LAP program might award points 
to a participant for signing up for a promotional offer, clicking on a hyperlink, clicking on 




an image, referring-a-friend, filling out surveys, or downloading software. The points 
earned from such activities are associated with the participant's email address. Thus, it is 
possible for LAP programs to have very large consumer participation, since consumers 
are not required to make a monetary transaction or provide detailed information about 
5 themselves to participate. 

As a result of the low threshold for participation and the potential for 
participation by large numbers of consumers, LAP programs are vulnerable to problems 
relating to over-participation and breaches of security. For example, if unexpectedly 
large numbers of consumers decide to participate in a particular LAP program, the value 

10 conferred by the program may exceed a desired maximum. With regards to security, 
since the threshold for participation is low, LAP programs may incur large losses in a 
relatively short time period due to fraud, misrepresentation or other security breaches. 
For example, one dishonest consumer can launch a type of automated program, referred 
to as a "bot", that completes the requirements of a LAP program numerous times and 

15 provides different email addresses to which the points earned are associated. By 

consolidating the points associated with all the email accounts, the dishonest consumer 
will have received substantial value from the LAP program, albeit through fraudulent 
means. 

However, since it is desirable to provide an enjoyable experience to 
20 consumers that participate in LAP programs, it is important that the mechanisms provided 
to implement the program do not overburden the consumers. For example, a LAP 
program that requires consumers to repeatedly provide detailed information to identify 
themselves would most likely overburden the consumer and result in low participation. 



25 SUMMARY OF THE INVENTION 

The present invention includes a redemption system for use by on-line 
Low Authentication Promotion (LAP) programs. The redemption system monitors 
program participation and provides one or more control mechanisms that can be used to 
protect against excessive program participation or losses due to security breaches. For 

30 example, excessive participation may be detected by monitoring the speed or "velocity" 
at which program benefits are conferred. Security breaches can also increase the velocity 
of an incentive program. For example, an increase in velocity may be detected if a small 
number of consumers use fraudulent means to obtain excessive program benefits in a 
short amount of time. Thus, included in the redemption system are one or more control 

3 




mechanisms to slow down the operation of a LAP program if its velocity becomes higher 
than desired or to shut down the LAP program if security breaches are detected. 

The redemption system provides a transaction history database that tracks 
the activity of program participants. For example, the history database tracks whether a 
5 particular consumer has participated solely in LAP programs, or whether that consumer 
has also participated in high authentication promotion (HAP) programs, such as when 
making a product purchase using a credit card. When the consumer attempts to redeem 
awards issued by a LAP program, the redemption system uses the information in the 
transaction history database to determine the level of authentication required from the 

10 consumer for the redemption. For example, if the consumer has participated in only LAP 
programs, then a high level of authentication will be required from the consumer to 
redeem the awards. However, if the consumer has participated in both LAP and HAP 
programs, the consumer need only satisfy low authentication requirements to redeem the 
awards, since high authentication information has already been provided. Thus, the 

15 redemption system operates to provide a more friendly environment to consumers, since 
high authentication information is not repeatedly required from the consumer. The 
system also provides a level a security, since participants of only LAP programs are 
required to provide a high level of authentication to redeem awards. Therefore, program 
losses due to dishonest participants (using bots for example) can be minimized. 

20 In one embodiment of the invention a method for providing a redemption 

system for use with a network promotion system is provided. The network promotion 
system provides awards to consumers for participation in promotion programs. The 
method performs steps of receiving award transaction information describing awards 
earned by consumers for participation in promotion programs, maintaining an award 

25 history database that contains the award transaction information, receiving a request from 
a consumer to redeem at least a portion of the awards earned by the consumer, and 
determining a level of consumer authentication required from the consumer to redeem the 
at least a portion of the awards, wherein the level of consumer authentication is 
determined from the award transaction information maintained in the award history 

30 database. 



BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 shows a diagram of promotion system elements constructed in 
accordance with the present invention; 
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FIG. 2 shows a portion of a data network including a promotion system 
constructed in accordance with the present invention; 

FIG. 3 shows a detailed diagram of a promotion server apparatus 
constructed in accordance with the present invention; 



promotion transactions; 

FIG. 5 shows a method for providing awards to consumers and updating a 
transaction history database in accordance with the present invention; 

FIG. 6 shows a method for providing notification to consumers pertaining 
10 to consumer award accounts; 

FIG. 7 shows a method for providing account access to consumers; and 

FIG. 8 shows a method for determining consumer authentication 
requirements during award redemption. 

1 5 DESCRIPTION OF THE SPECIFIC EMBODIMENTS 



constructed in accordance with one embodiment of the present invention. The promotion 
system 100 allows a consumer 102 to participate in incentive programs, such as LAP 
programs, to receive and redeem awards. Included with each of the elements are control 

20 mechanisms that can be used to monitor and control the operation of the promotion 
system. The elements of the promotion system 100 may be located at a particular 
merchant's computer system and/or distributed or replicated at various locations 
throughout a data network. The promotion system 100 is suitable for use in a networked 
environment, such as on the Internet, or in a non-networked environment that uses point 

25 to point communication mechanisms. 



award module 104 comprises a processor running software (program code) that operates 
to allow the consumer 102 to earn awards, for example, awards based on specific LAP 
activity, such as signing-up for a program. Included at the award module 104 are award 
30 controls 106 comprising hardware and/or software that operate to provide risk mitigation 
mechanisms to monitor and control the operation of the award module 104. For example, 
the risk mitigation mechanisms might include consumer authentication (CA) mechanisms 
that can authenticate participating consumers, program velocity (VEL) controls that can 
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FIG. 4 shows a transaction history database structure for storing consumer 



FIG. 1 shows a diagram of a promotion system 100 comprising elements 



One element of the promotion system 100 is an award module 104. The 
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detect program velocity parameters and adjust the operation of the promotion system 100 
accordingly, and automatic shutdown (SHUT) capability that can detect security breaches 
and shutdown the promotion system 100. 

Another element of the promotion system 100 is a notification module 
5 108. The notification module 108 comprises a processor running software (program 
code) that operates to notify the consumer 102 regarding the status of accumulated 
program benefits. For example, the consumer may interact with the notification module 
108 to check to see how many award points he/she has earned. It is also possible that the 
notification module 108 sends information to the consumer, such as monthly statements 

10 or award notifications shortly before an award is to expire. Included at the notification 
module 108 are notification controls 110. The notification controls 1 10 include CA 
mechanisms that operate to provide secure access to consumer accounts. 

The third element of the promotion system 100 is a redemption module 
112. The redemption module 112 comprises a processor running software (program 

15 code) that operates to allow the consumer 102 to redeem awards. For example, the 

consumer may interact with the redemption module 1 12 to convert an award to value by 
exchanging award points for selected goods or services. Included at the redemption 
module are redemption controls 114. The redemption controls 114 provide risk 
mitigation mechanisms, such as accelerate point expiration (ACC) to adjust how fast 

20 earned points expire, an account consolidation mechanism (CTL) to monitor account 

consolidations, and CA mechanisms that operate to authenticate consumers attempting to 
redeem awards. 

The fourth element of the promotion system 100 is a transaction history 
database 116. The transaction history database stores promotion transactions for all 
25 registered consumers. For example, if a consumer participates in five promotions over 
the course of one year, information pertaining to those five promotions is stored in the 
transaction history database 116. Information in the transaction history database is used 
by the elements of the promotion system to determine various operating parameters and 
to determine the level of consumer authentication required to redeem awards. 

30 

Control Mechanisms 

The control mechanisms included in the promotion system 100 protect the 
operation of LAP programs from excessive participation or losses that may occur from 
fraud or misrepresentation. A detailed description of the control mechanisms are 



provided herein in the following sections. Although the control mechanisms are 
organized as front end controls and back end controls, it is possible that other 
organizations of the control mechanisms may be used without deviating from the scope of 
the present invention. 

5 1. Front End Controls 

Front end controls are used to monitor and control program activity at the 
award module 104. The front end controls allow the originator of the promotion to set 
operating parameters based on marketing and fraud mitigation concerns and to take 
specific action if the program operation exceeds the set parameters. 

10 Operating Parameters 

The operating parameters are used to set operation of the promotion, for 
example, with regards to marketing or business concerns. For example, it might be 
desirable to start and stop a promotion on specific dates. It may also be desirable to limit 
the total value conferred to consumers by the promotion and to limit the value conferred 

1 5 to any one consumer. Therefore, the following operating parameters might be specified 
by the promotion originator, however, the presented list is not intended to be a complete 
list as there may exist a large range of possible operating parameters. 

- Limits on the number of points a consumer can earn in a day. 

- Limits on the number of points a consumer can earn in a lifetime. 

20 - Limits on the overall number of points that the promotion can award in a day. 

- Limits on overall number of points that the promotion can award over the life of 
the promotion. 

- Promotion start and end dates. 

Fraud Mitigation Parameters 
25 The fraud mitigation parameters are preferably selected such that the 

promotion system operates with certain security constraints. For example, it is desirable 
to prevent a small number of consumers from obtaining additional awards by using 
fraudulent means. Fraud mitigation parameters include. 

- Limits on the velocity of awards awarded to an individual person. 
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- Limits on the number of points that the promotion can award based on the 
originating IP address. 

- Limits on the number of points awarded based on recognition of specific 
participation patterns. 

5 2. Back End Controls 

Back end controls are used to monitor and control program activity at the 
notification module 108 and the redemption module 112. The back end controls allow 
the use of operating parameters based on redemption or security concerns and allow 
specific action if the promotion program operation exceeds the set parameters. 

10 Data Integrity Checks 

The data integrity checks are used to validate the authenticity of members 
and to provide the following functions. 

- Distinguish and track the level of authentication provided by members by storing such 
information in the transaction history database. 

15 - Members that have provided only a low level of authentication are flagged as "low 
authentication" and "no redeem", which triggers authenticity checks and back end 
redemption controls. This also aids in reporting and targeting marketing objectives. 

Redemption Parameters 

Redemption parameters are used to monitor and control redemption 
20 activity. The redemption parameters are used to perform the following functions. 

- Account consolidation controls are provided to ensure that multiple (and potentially 
fraudulent) consumer accounts are not redeemed to the same frequent flier number, 
and that credit card authorization controls are used to ensure that consumers do not 
use the same credit card for authentication across multiple (and potentially fraudulent) 

25 consumer accounts. 

- Ensure that the promotion rules are upheld during award redemption or account 
consolidation, and that award points are not redeemed by multiple false identities into 
a single account. 

- Provide automated features that can detect fraudulent/redundant transactions and 
30 remove them without extensive human intervention. 
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Exemplary Implementation 

FIG. 2 shows a data network 200 that includes the elements of the 
promotion system 100 of FIG. 1. The network 200 includes client systems 202, 204 and 
206 that couple to a network backbone 208. Three merchant systems 210, 212 and 214 
5 couple to the network backbone 208 and to an application service provider (ASP) 216. A 
promotion server 218 and an email provider 220 also couple to the network backbone 
208. 

The client systems comprise hardware and/or software that allow 
consumers to interact with other entities connected to the network backbone 208. For 

10 example, the client systems may be desktop computers running browser software that 
allows a consumer to search for information available over the network 208. The 
merchant systems 210, 212, 214 include hardware and/or software to provide, for 
example, a website that includes information regarding products or services that are 
available at each respective merchant. Thus, consumers utilizing the client systems can 

15 search for information relating to specific products or services, locate one or more 

selected merchant systems offering such products or services, and contact the selected 
merchant systems to view their respective websites and ultimately purchase the desired 
product or service. 

The promotion server 218 provides promotion programs that the 

20 merchants and consumers can register to participate in. For example, the promotion 

server provides LAP programs that allow consumers to earn points redeemable at selected 
merchants. To implement the promotion programs, the promotion server 218 uses the 
ASP 216 to distribute information to consumers regarding available promotions. For 
example, the ASP 216 distributes content in the form of banner ads that are displayable at 

25 the merchant's websites. The banner ads contain clickable links that consumers can 
activate to indicate their intention to participate in a selected promotion. The clickable 
links may redirect the consumer to the ASP system to participate in the promotion. Thus, 
the ASP 216 operates to distribute promotional content to the merchants thereby allowing 
consumers to visit a merchant's website and select, via a clickable link, a promotion in 

30 which to participate. It is not necessary that the merchant know about the links contained 
in a promotion. The merchant simply offers the promotion to consumers that visit the 
merchant's website, thereby encouraging consumers to visit the website and hopefully 
purchase the merchant's products or to simply visit the site more frequently. 
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The ASP 216 may also distribute promotional content to consumers via the 
email provider 220. For example, the ASP sends promotional information to the email 
provider via path 222. The email provider then sends email directly to the client systems, 
via a connection 224 to the network 208, so that the email may be received by the 
5 consumers. The email contains clickable links that allow consumers to participate in the 
promotions in the same way as when using the banner ads at the merchant websites. If a 
consumer clicks on a link provided in the email, the client system is redirected to the ASP 
where the consumer learns more about the available promotion and how to participate. 

The ASP 216 provides the functions of the award module 104 shown in 
10 FIG. 1 . The ASP includes the front end award controls 106, such as velocity controls and 
consumer authentication. The ASP also includes a local database 226 that stores 
information about the promotional content offered by the ASP. A reward broker 228 
included at the ASP operates to interact with consumers and transfers information about 
points earned by consumers to the promotion server 218, via path 230. Detailed 
15 information about the reward broker 228 will not be presented in this document, since 
such detail is not necessary to the understanding of the present invention. Virtually any 
reward broker that operates to interact with consumers to award points for consumer 
participation is suitable for use with the present invention. For example, once the award 
broker determines points to award to a consumer for participation in a promotion 
20 program, the reward broker transmits the point information to the promotion server 218 
either directly or via a network connection, such at that shown by path 230. 

promotion server 212 included back-end control mechanisms 232, a 
transactioB^ocessor 234 and the transaction history database 116. The promotion server 
218 / e^erates to provide the functions of the ^notification module 108 and the redemption 
25 module 112. Thus, the control mechanisn^ 232 operate to provide the notification 
controls 110 and the redemption control/ 114 described above. Therefore, the data 
network 200 including the promotion ^System 100 operates to provide consumers the 
ability to participate in programs, e^frn award points at the ASP 216, and redeem points at 
the promotion server 218. 
30 FIG. 2 depicts one embodiment of a promotion system in accordance with 

the present invention, however, other similar embodiments are possible without deviating 
from the scope of the invention. For example, the ASP 216 system may include a 
Notification module 108 or a Redemption module 112. Thus, it is possible that the 
elements of the promotion system included in the present invention be distributed in one 
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or more variations from that shown in FIG. 2 without deviating from the scope of the 
invention. 

FIG. 3 shows a detailed diagram of the promotion server 218 constructed 
in accordance with the present invention. The promotion server 218 includes a 
5 transaction receiver 302, the promotion processor 234, the security controls 232, the 

transaction history database 1 16, a transaction monitor 304, a promotion database 308 and 
a promotion administration processor 306. 

The transactions receiver 302 receives promotion transactions from the 
ASP 216 pertaining to the promotion participation and points awarded to consumers. The 
10 promotion processor 234 processes this information and stores it in the transaction history 
database 116. The promotion administration processor 306 interfaces with clients to 
allow promotion notifications to be sent and client redemption requests to be received. 
The security controls 232 are used by the promotion administration processor to 
implement back-end security controls. The transaction monitor 304 processes received 
1 5 transactions to determine such parameters as velocity parameters for use by both the 
promotion processor 234 and the administration processor 306. 

Each of the security and control mechanisms will now be described in 
detail and with reference to their implementation in the promotion system 100 as shown 
in FIG. 2. 

20 Consumer Authentication 

Consumer authentication (CA) is used at the ASP 216 and at the 
promotion server 218 to provide measures that verify the consumer's identity. 
Consumers that have earned points through low authentication activities may be 
considered high risk, since the strength of the authenticity check for the consumer in 

25 order to participate in low authentication activities is low (possibly zero). For example, a 
consumer may participate in a LAP program by simply providing an email address, which 
may in fact be fraudulent. These consumers can later be "authenticated" by requiring 
them to submit a unique credit card number to the promotion system at a later time after 
the award has been made, thus allowing risk mitigation to take place without interfering 

30 with the marketing objectives of the promotion For example, the ASP 216 receives a 
request from a consumer to participate in a low authentication promotion. The ASP can 
do a basic authenticity check, like verifying whether the initiator of the request has 
previously participated in the promotion by matching the received information with 
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information contained in the local database 226. If the initiator of the request is not found 
in the local database 22 6, the ASP can allow the consumer to participate by requesting 
that the consumer simply provide an email address. This reflects a low level of 
authentication. The consumer may be required to provide a higher level of authentication 
5 when an attempt is made to redeem any points awarded. The high level of authentication 
can occur, for example, by requesting credit card information from the consumer that can 
be verified using a third party resource, such as a credit card verification service. Other 
forms of consumer authentication can be used beyond just credit cards, including (but not 
limited to) address verification systems, social security number verification, driver license 
10 numbers verification, voice recognition, and/or public key cryptography checks. 

Velocity Controls 

Velocity controls (VEL) are used at the ASP 216 and the promotion server 
218 as a mechanism to control the velocity of a promotion program. For example, at the 
promotion server 218, the transaction monitor 304 measures the type, number and rate of 

15 transactions processed by the promotion processor 234. Promotion parameters stored at 
the promotion database 308 are used by the promotion processor 234 to determine if a 
selected operating parameter, such as the number of promotion transactions per hour, is 
being exceeded. If so, the promotion processor 234 takes responsive action, such as 
increasing the response time for each transaction request by inserting time delays in the 

20 promotion processing. For example, a consumer contacts the ASP in an attempt to 
participate in a promotion to earn award points. The velocity of the promotion is 
determined at the ASP and compared to parameters stored at the ASP that represent 
acceptable velocity for the particular promotion. If the velocity of the promotion exceeds 
acceptable parameters, then time delays are inserted in the ASP processing, so that a time 

25 delay is incurred before the ASP responds to the consumers request. For example, a 
delay in the range of 1-10 seconds may be inserted in the ASP processing before 
responding to the consumer's request to participate in the promotion. The inserted time 
delay has the effect of slowing down the velocity of the promotion program. Longer 
delays are also possible depending on the circumstances of the promotion program. Such 

30 velocity controls can also be used to control fraud beyond just delaying the response time, 
for example, by stopping the promotion altogether as discussed in the next section. 
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Auto Shut-Down Controls 

Automatic shutdown controls (SHUT) are used at the ASP 216 and the 
promotion server 218 to provide a way to shut down a promotion based on selected 
conditions. For example, if the promotion's velocity parameters are exceeded or if 
5 abnormal transaction behavior is detected, the automatic shutdown controls react by 
stopping operation of the promotion. The automatic shutdown controls can also be 
triggered off events such as, promotion expiration, all points awarded, or detection of 
unusual frequency, pattern matches, or repeat transactions. For example, the promotion 
processor 234 reads the total number of points to be awarded for a promotion from the 

10 promotion parameter database 308. The promotion processor 234 also receives 

information about the actual points awarded from the transaction monitor 304. The 
promotion processor 234 then determines from the received point information whether all 
available points have been awarded, and if so, shuts down the promotion by refusing to 
process any more promotion requests. In one embodiment, the auto shut down controls 

15 shuts down the promotion in a fashion designed to be barely perceptible to consumers so 
that the marketing objectives of the promotion are not compromised. This shut down 
mechanism entails removing (via the ASP 216) all promotional content off of the sites 
where it is displayed (i.e. the merchants; e.g.: 210) in real time so that new consumers that 
arrive at those sites do not even know that the promotion existed in the first place. 

20 Account Consolidation Controls 

Account consolidation controls (CTL) are used at the promotion server 
218 to provide a way to prevent consumers from consolidating multiple accounts that 
may have been fraudulently established. For example, if the a consumer uses a "bot" to 
establish 100 accounts each containing 100 award points, the consumer may try to 

25 consolidate these accounts into one account having a point value of 10,000. The 
consumer would then try to redeem the 10,000 points for value. This situation may 
happen if a LAP program offers points that can be earned by a consumer who only needs 
to provide an email address to satisfy authentication requirements. 

The CTL controls can be activated whenever an account consolidation is 

30 requested by an consumer. In one embodiment , the CTL controls operate to require the 
consumer to provide additional authentication to consolidate accounts. For example, the 
CTL controls may require the consumer to provide a high level of authentication for 
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every account to be consolidated. Thus, the consumer may have to provide valid credit 
card information for each account. In another embodiment, the CTL controls operate to 
required that each account be associated with a different valid credit card. Thus, the CTL 
controls provide a substantial authentication barrier to consumers desiring to use 
5 fraudulent means to acquire award points. 

Transaction History Database 

FIG. 4 shows an exemplary data structure 400 for the transaction history 
database 116 constructed in accordance with the present invention. The database 1 16 is 

10 used to store information that can be used by the promotion processor to determine 

information about promotion transactions in which consumers have participated. The 
database 116 includes a consumer identification column 402 that includes information 
about consumers registered with the promotion system. 

A transaction type column 404 shows the type of transactions each 

1 5 consumer has participated in. For example, consumer A has participated in four 

transaction types including, sign-up, survey, referral and purchase. Associated with each 
transaction type is an authentication column 406 that provides the level of authentication 
provided by the consumer to participate in the respective transaction. For example, 
consumer A provided low level authentication to participate in the survey transaction 420. 

20 A points column 408 shows the points each consumer earned for 

participating in each type of transaction and a date earned column 410 and date expired 
column 412 show when the points were earned and when they expire. For example, 
consumer B earned 100 points for a sign-up transaction 422 performed on 2/1/99 and 
these points are due to expire on 1/1/2000. 

25 

Exemplary System Operation 

FIGS. 5, 6, 7 and 8 shows methods of operating a promotion system in 
accordance with the present invention. 

FIG. 5 shows a method 500 of operation wherein a consumer participates 
30 in a promotion program to earn award points. The method begins at block 502 by 

presenting available promotion programs to consumers. For example, a consumer logs 
into a merchant website and views a banner advertising an available promotion. The 
banner contains a link to redirect the consumer to an ASP where the consumer can 
participate in the promotion. 
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At block 504, the consumer participates in the promotion to earn award 
points. For example, the consumer clinks on the link in the banner ad and is redirected to 
the ASP, where the consumer completes a survey to earn award points. 

At block 506, front end security controls are performed. For example, a 
5 velocity check is performed to verify that the designated promotion velocity has not been 
exceeded. A consumer authentication is performed to verify that the consumer has not 
already participated in the promotion. In the case of a promotion associated with a 
survey, the level of authentication may be low, so that the consumer need only provide a 
valid email address. If the promotion velocity has been exceeded, time delays may be 
10 inserted to slow down responses to the consumer, thereby slowing down the overall 
promotion velocity. 

At block 508, a test is performed to determine if the requirements of the 
security and control mechanisms have been satisfied. If not, the method proceeds to 
block 510 where the consumer participation is rejected. For example, the consumer is 
15 notified that certain requirements for participation have not been satisfied. However, if 
the requirements have been satisfied at block 508, the method proceeds to block 512. 

If the consumer is rejected at block 510, the method proceeds to block 514 
where the content of the promotion is updated if need be. For example, if a promotion 
shut down is required, the promotion advertising content will be removed from merchant 
20 websites, so that consumers can no longer participate in the program. 

At block 512, assuming the security check at block 508 was OK, the 
consumer completes the earning activity and is awarded points for participation in the 
promotion. For example, a reward broker may be activated to provide the award and send 
a confirming message to the consumer. 
25 At block 516, information regarding the transaction is provided to the 

promotion system. Thus, the promotion system is informed of the identity of the 
consumer, the type of promotion, the points awarded and the level of authentication 
provided by the consumer. 

At block 518, the promotion system updates a transaction history database 
30 with information about the transaction. The history database is used to keep track of all 
promotion transaction activity. For example, the data structure 400 is an example of the 
structure of the transaction history database that may be used to store promotion 
transaction information. The transaction information remains in the transaction history 
database for access at other times as necessary, for example, during a point redemption 
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process. Thus, the method 500 is suitable for use to award points to consumers based on 
their participation in promotion programs in accordance with one embodiment of the 
present invention. 

FIG. 6 shows a method 600 for notifying consumers regarding award 
5 account status. It will be assumed that there is at least one consumer transaction record in 
the transaction history database. 

At block 602, a consumer account in the transaction history database is 
reviewed to determine conditions such as, award points about to expire. At block 604, a 
determination is made whether the consumer has any high authentication transactions. If 
10 so, the method proceeds to block 602 where another consumer account is accessed for 
review. 

The method proceeds to block 606 if it is determined that the consumer 
has no high authentication transaction in the transaction history. At block 606, the 
expiration of award points can be adjusted if it is desirable to encourage the consumer to 
15 provide a high level of authentication. For example, a high level of authentication 
requires the consumer to provide detailed information about the consumer to the 
promotion system. This information can be used for marketing or other purposes, such as 
directing additional promotions to the consumer. Thus, it is desirable to encourage 
consumers to provide a high level of authentication. 
20 At block 608, the consumer is notified regarding award points that are 

about to expire. The consumer may also receive a request to provide high level 
authentication. The consumer may be rewarded for doing so, for example, the expiration 
date of the consumers awards may be extended. Thus, the method 600 provides a way to 
notify consumers about award account status and to encourage consumers to provide high 
25 level authentication to the promotion system. 

FIG. 7 shows a method 700 that allows a consumer to request award 
account services from a promotion system, such as requesting an award account balance. 

At block 702, a request from a consumer is received by the promotion 
system. The request includes consumer identification and/or consumer account numbers. 
30 At block 704, a review of the consumers transaction history is used to determine if the 
, consumer has made any high authentication transactions. 

The method proceed to block 706 if the consumer has made high 
authentication transactions or the method proceeds to block 708 if the consumer has made 
only low authentication transactions. At block 706, the consumer is requested to provide 
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low authentication, since the consumer has already provided high authentication for past 
transactions. At block 708, the consumer is requested to provide high authentication 
since the consumer has not yet provided a high level of authentication in prior 
transactions. 

5 At block 710, the authentication provided by the consumer is verified. If 

the consumer cannot be authenticated, the request is terminated, as shown at 714. If the 
consumers authentication can be verified, the services requested by the consumer are 
provided, as shown at block 712. Thus, the level of authentication required from the 
consumer to fulfill requests for account services is based on the consumer's transaction 
10 history. 

FIG. 8 shows a method 800 for redeeming awards from a promotion 
system in accordance with the present invention. The method 800 provides a way to 
differentiate consumer authentication requirements based on consumer transaction 
history. 

15 At block 802, the promotion system receives a redemption request from a 

consumer. The consumer wishes to redeem award points that have been earned through 
participation in prior promotion activity. 

At block 804, the promotion system activates back-end security controls. 
The back-end security controls include, but are not limited to, velocity controls, auto shut- 

20 down controls and account consolidation controls. For example, if the redemption 
velocity is very high, it may be necessary to slow down or shut-down the promotion. 

At block 806, the transaction history database is accessed to determine the 
consumers transaction history. At block 808, the authentication level previously provided 
by the consumer is checked to see whether a high level of authentication has been 

25 provided in prior transactions. If a high authentication level has already been provided by 
the consumer, the method proceeds to block 810, where only low authentication is 
requested from the consumer. If a high level of authentication has not been provided by 
the consumer, the method proceeds to block 812, where high authentication is requested 
from the consumer. 

30 At block 814, the authentication provided by the consumer is checked for 

validity. If the authentication provided is not valid, then the method proceeds to block 
816 where the redemption request is rejected. If the authentication provided by the 
consumer is determined to be valid, then the method proceeds to block 818, where the 
consumer's redemption request may be satisfied. 
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At block 818, if the consumer's redemption request involves account 
consolidation, then the account consolidation controls (CTL) would be activated to 
protect against a situation where the consumer attempts to consolidate fraudulent 
accounts. For example, the system would check the transaction history of each account 
5 involved in the consolidation to see what level of authentication has been previously 
provided. The system then requests that the consumer provide a high level of 
authentication for every account where such authentication has not been provided. As a 
result, the consumer will be required to have provided at one time or another a high level 
of authentication for every account involved in the account consolidation. 

10 The present invention provides a promotion system that determines 

consumer authentication requirements based on a consumer transaction history. It will be 
apparent to those with skill in the art that modifications to the above methods and 
embodiments can occur without deviating from the scope of the present invention. 
Accordingly, the disclosures and descriptions herein are intended to be illustrative, but 

15 not limiting, of the scope of the invention which is set forth in the following claims. 
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